Bug#853241: kf5-messagelib: CVE-2016-7967 CVE-2016-7968

To: Thorsten Alteholz <debian@alteholz.de>, 853241@bugs.debian.org
Subject: Bug#853241: kf5-messagelib: CVE-2016-7967 CVE-2016-7968
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Mon, 30 Jan 2017 20:15:38 +0100
Message-id: <[🔎] 20170130191538.pztlortwikgviyyt@eldamar.local>
Reply-to: Salvatore Bonaccorso <carnil@debian.org>, 853241@bugs.debian.org
In-reply-to: <[🔎] alpine.DEB.2.02.1701301953540.4155@jupiter.server.alteholz.net>
References: <[🔎] alpine.DEB.2.02.1701301953540.4155@jupiter.server.alteholz.net>

Hi

It might be noted that the issues itself are mitigated with the fixes
applied for CVE-2016-7966, and a user protected from this CVE by only
viewing plain text mails. But the issues still presend. At least for
CVE-2016-7968 a full fix would need to be building with Qt 5.7.0
AFAICT (please correct me if I'm wrong).

Regards,
Salvatore

Reply to:

Follow-Ups:
- Re: Bug#853241: kf5-messagelib: CVE-2016-7967 CVE-2016-7968
  - From: Lisandro Damián Nicanor Pérez Meyer <perezmeyer@gmail.com>

References:
- Bug#853241: kf5-messagelib: CVE-2016-7967 CVE-2016-7968
  - From: Thorsten Alteholz <debian@alteholz.de>

Prev by Date: Bug#853241: kf5-messagelib: CVE-2016-7967 CVE-2016-7968
Next by Date: Processed: found 853241 in 4:16.04.3-2
Previous by thread: Bug#853241: kf5-messagelib: CVE-2016-7967 CVE-2016-7968
Next by thread: Re: Bug#853241: kf5-messagelib: CVE-2016-7967 CVE-2016-7968
Index(es):
- Date
- Thread